Insecure SSL/TLS options being allowed

[xeon]

Hello,

There are a few insecure server configurations that are still being allowed in FileZilla Client.

- 512-1024-bit certificates are still being accepted.
- 512-1024-bit DH parameters are still being accepted.
- Certificates with MD5-based signatures are still being accepted.

[botg]

Do you have example hosts were such parameters are being negotiated?

[xeon]

Do you have example hosts were such parameters are being negotiated?

I don't know of any hosts that have them. I was just testing locally if FileZilla Client would negotiate with a server using such insecure methods, and it does.

[botg]

To clarify, are you using one of the FileZilla binaries as available from https://filezilla-project.org/ or a package from elsewhere?

[xeon]

I'm using FileZilla_3.7.3_win32-setup.exe from your site.